Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3234203d3e20323633353135.roa
File:                     3139312e3234332e3231362e302f32312d3234203d3e20323633353135.roa (raw, json)
Hash identifier:          arcqwWNff/vo7NX/33I0RFSLXBpA1cAte82/OTkQ23s=
Subject key identifier:   67:8C:EE:45:83:C9:71:45:21:FB:3A:DF:AB:ED:CD:F5:EC:D8:FE:11
Certificate issuer:       /CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
Certificate serial:       1D6E042C01E01D651CD9CF5DD5AB441C753323C8
Authority key identifier: 0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3234203d3e20323633353135.roa
Signing time:             Mon 12 Sep 2022 23:10:15 +0000
ROA not before:           Mon 12 Sep 2022 23:05:15 +0000
ROA not after:            Mon 11 Sep 2023 23:10:15 +0000
asID:                     263515
IP address blocks:        191.243.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6e:04:2c:01:e0:1d:65:1c:d9:cf:5d:d5:ab:44:1c:75:33:23:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
        Validity
            Not Before: Sep 12 23:05:15 2022 GMT
            Not After : Sep 11 23:10:15 2023 GMT
        Subject: CN=678CEE4583C9714521FB3ADFABEDCDF5ECD8FE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:8c:41:13:ce:17:4f:49:b2:5b:d4:18:70:
                    2b:1b:3b:da:15:bd:e8:74:27:22:a2:95:b3:1a:17:
                    4f:1f:b1:e7:84:c5:c1:ef:1b:ec:b0:e1:d8:d0:4e:
                    90:fb:21:44:d4:b3:01:1c:83:c1:7a:6d:f9:3c:6c:
                    72:8d:4a:ff:54:2f:44:3f:00:e3:70:ea:f9:89:8b:
                    cf:81:fe:c0:3b:e4:d0:d7:a7:b0:90:df:f7:14:d5:
                    9e:92:72:33:b0:84:9b:db:29:51:a7:4a:ab:92:ed:
                    61:4f:00:ed:5b:81:d7:a0:43:2e:02:f4:c9:ab:3f:
                    e5:71:3c:56:02:d1:43:2c:22:cd:a1:51:16:77:1f:
                    62:54:84:88:a4:51:61:9e:9e:70:09:c1:32:af:ef:
                    99:ee:4e:07:12:59:4f:b5:59:15:2b:38:5d:d7:9e:
                    39:ac:47:90:b1:92:db:cf:10:7a:5b:3f:62:76:ed:
                    9d:4d:f3:34:89:72:b0:7a:e2:76:bc:37:35:d6:eb:
                    5f:10:4e:6f:78:4b:ce:c5:29:a7:36:f2:b2:d5:98:
                    f1:4e:19:57:b4:7b:14:cf:9a:5f:8b:1a:a9:15:7f:
                    2e:f9:92:94:15:de:e3:87:0f:cb:06:30:14:7b:2a:
                    49:aa:80:06:2b:f4:1f:8d:3f:b5:27:cb:03:26:e4:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8C:EE:45:83:C9:71:45:21:FB:3A:DF:AB:ED:CD:F5:EC:D8:FE:11
            X509v3 Authority Key Identifier:
                keyid:0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3234203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:d9:0f:1b:55:07:e6:af:66:6a:3a:26:51:71:8e:0c:d6:9f:
         68:dd:3b:e1:e2:ff:e6:02:f1:dd:e2:ec:48:2c:55:a7:88:1e:
         20:58:39:2d:51:f3:da:e5:d4:75:e9:e1:d7:b6:ca:ef:6a:24:
         52:a9:c8:9a:ca:27:c4:e0:f2:6e:68:35:5a:b2:1a:ea:25:5f:
         b6:b5:59:5e:66:d2:17:1f:94:b0:88:a4:8d:a0:50:3e:bb:2f:
         0d:e7:e2:14:f4:8d:ca:02:e1:ec:36:f1:bd:e8:28:01:06:cf:
         9f:d1:1c:48:36:d5:80:6e:b8:47:40:91:70:52:39:c8:24:19:
         69:5f:0d:99:4e:20:49:7c:92:a0:8b:97:b5:ef:97:e2:dd:73:
         08:ab:bb:46:0b:da:b7:d3:e1:ef:23:88:dd:72:80:50:79:73:
         13:dc:d2:f0:1e:e2:f4:be:96:f3:34:61:d7:bc:1b:39:2e:8a:
         6e:9d:dc:b0:11:6a:a3:ae:3c:da:a5:bd:3a:2e:15:18:87:44:
         f1:8b:23:6f:a8:1e:dc:38:8c:2a:07:97:7c:a4:c5:ef:cd:01:
         d3:1a:71:70:60:c6:5e:d6:e6:00:28:e8:31:7a:f5:0a:8e:c4:
         57:11:3a:d9:56:56:59:28:70:4c:cb:34:26:8a:5f:80:4b:6c:
         d8:e1:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org